CVE-2024-54017

CVE-2024-54017 affects SIPROTEC 5 devices (multiple models listed) and is caused by insufficient randomness in session identifiers. This enables an unauthenticated remote attacker to brute-force a session ID and read limited information from the web server without authorization. No exploitation d...